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ABSTRACT OF THE DISCLOSURE 
In a cryptographic system, the unlocking of secret keys on a user system is 
audited and correlated with other events that typically occur after the secret key is used to 
perform a cryptographic operation. Audit evidence of secret key cryptographic operations is 
recorded for later review and/or analysis, for use as stored evidence of unauthorized activity 
and/or for use in refuting false claims of repudiation of authorized activity. Some systems 
might also provide users with user activity reports that can alert a user to suspicious or 
unauthorized activity using that user's access. 
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